Legal

Privacy Policy

Last updated:

Draft for review. This is placeholder copy structured for UK GDPR alignment. Final wording must be reviewed by a qualified legal professional before publishing.

1. Who we are

Desi Drop ("we", "us", "our") operates the Desi Drop mobile application and this website. We are the data controller for the personal data described in this policy. You can contact us at privacy@desidrop.co.uk.

2. Data we collect

  • Account data: your name, email address, phone number and delivery addresses.
  • Order data: items purchased, shop, delivery details and order history.
  • Payment data: processed by our payment providers; we do not store full card details.
  • Usage data: device information and app activity used to keep the service secure and working.

3. How we use your data

We use your data to create and manage your account, process and deliver orders, provide customer support, take payments, prevent fraud, and meet our legal obligations. Where required, we rely on your consent — for example, for optional communications.

4. Lawful basis

Under the UK GDPR, we process personal data on the basis of: performance of a contract (to deliver orders), legitimate interests (to run and improve our service), legal obligation, and consent (where applicable).

5. Sharing your data

We share data only where necessary — with the local shops fulfilling your order, delivery riders, payment processors and service providers acting on our behalf. We never sell your personal data.

6. Data retention

We keep your personal data only as long as needed for the purposes described here, or as required by law (for example, financial record-keeping). When no longer needed, data is securely deleted or anonymised.

7. Your rights

You have the right to access, correct, delete or restrict the processing of your personal data, to object to processing, and to data portability. To exercise any of these rights, contact us at privacy@desidrop.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO).

8. Security

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse.

9. Changes to this policy

We may update this policy from time to time. Material changes will be communicated through the app or on this page, with the "last updated" date amended accordingly.